CVE-2020-10571

An issue was discovered in psd-tools before 1.9.4. The Cython implementation of RLE decoding did not check for malicious data...

hacktools (>=0.8.0, <=0.26.0) potentially affected by CVE-2020-10571 via psd-tools (1.8.38)

psd-tools PYPI version 1.8.38 is affected by a known vulnerability. The following packages have a transitive dependency on psd-tools and may be impacted: - hacktools =0.8.0, =0.26.0 Source cves: CVE-2020-10571 Source advisory: OSV:GHSA-22JR-VC7J-G762...

CVE-2020-10571

An issue was discovered in psd-tools before 1.9.4. The Cython implementation of RLE decoding did not check for malicious data...

django-frog (>=2.0.0, <=2.3.0), hacktools (>=0.8.0, <=0.26.0) potentially affected by CVE-2020-10571 via psd-tools (>=1.4.0, <=1.8.38)

psd-tools PYPI version =1.4.0, =2.0.0, =0.8.0, =0.26.0 Source cves: CVE-2020-10571 Source advisory: OSV:PYSEC-2020-91...

CVE-2020-10571

The CVE-2020-10571 issue affects psd-tools prior to v1.9.4, where the Cython implementation of RLE decoding fails to validate input data. This can be triggered by malicious or malformed PSD input, with documented advisories describing a related buffer overflow scenario when the Cython path is use...